From f1eb0ccd9e7698a591c16d1ae58920449feb4c78 Mon Sep 17 00:00:00 2001 From: Lennart Poettering Date: Sun, 10 May 2020 10:19:05 +0200 Subject: [PATCH] update TODO --- TODO | 17 ++++++++++++++--- 1 file changed, 14 insertions(+), 3 deletions(-) diff --git a/TODO b/TODO index eb63823e46..ab4550f658 100644 --- a/TODO +++ b/TODO @@ -22,6 +22,14 @@ Janitorial Clean-ups: Features: +* random-util: make user of new GRND_INSECURE flag wherever possible + +* nspawn: support time namespaces + +* pid1: Move to tracking of main pid/control pid of units per pidfd + +* pid1: support new clone3() fork-into-cgroup feature + * All tools that support --root= should also learn --image= so that they can operate on disk images directly. Specifically: bootctl, firstboot, tmpfiles, sysusers, systemctl, repart, journalctl, coredumpctl. @@ -45,8 +53,9 @@ Features: resize to diskSize if possible, but leave a certain amount (configured by a new value diskLeaveFreeSize) of space free on the backing fs. -* homed: permit multiple private keys to be used locally, and pick the right - one for signing records automatically depending on a pre-existing signature +* homed: permit multiple user record signing keys to be used locally, and pick + the right one for signing records automatically depending on a pre-existing + signature * homed: add a way to "adopt" a home directory, i.e. strip foreign signatures and insert a local signature instead. @@ -59,6 +68,8 @@ Features: though: if noone is logged in (or no other user even exists yet), how do you unlock the volume in order to create the first user and add the first pw. +* homed: support new FS_IOC_ADD_ENCRYPTION_KEY ioctl for setting up fscrypt + * busctl: maybe expose a verb "ping" for pinging a dbus service to see if it exists and responds. @@ -169,7 +180,7 @@ Features: * userdb: allow existence checks -* pid: activation by journal search expression +* pid1: activation by journal search expression * when switching root from initrd to host, set the machine_id env var so that if the host has no machine ID set yet we continue to use the random one the